Secrets
The secret vault's values (0b secret, 0b exec --env, production approvals, and the dashboard's Secrets page) were removed on 2026-10-23. Values stored before then are no longer handed to any machine.
Last updated
Keep API keys in the secret manager you already use (1Password, Doppler, Infisical, Bitwarden Secrets Manager or your cloud's) and give commands their keys from there. 0b exec still runs a command with the repo's CLI accounts.
Your vault key stays: it seals end-to-end history, and a new machine still asks for it the same way (Approvals).